diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index f6c84ea..50546fc 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -63,3 +63,25 @@ jobs:
       uses: github/codeql-action/analyze@v3
       with:
         category: "/language:${{matrix.language}}"
+        output: sarif-file
+        upload: failure-only
+
+    - name: Filter CodeQL results
+      uses: advanced-security/filter-sarif@v1
+      with:
+        patterns: |
+          -external/
+        input: sarif-results/java.sarif
+        output: sarif-results/java.sarif
+
+    - name: Upload CodeQL results
+      uses: github/codeql-action/upload-sarif@v3
+      with:
+        sarif_file: sarif-results/java.sarif
+
+    - name: Upload loc as a Build Artifact
+      uses: actions/upload-artifact@v4
+      with:
+        name: sarif-results
+        path: sarif-results
+        retention-days: 1